Kovter the click-fraud Trojan is back with a brand-new trick. Customers of our endpoint protection product CylancePROTECT® will be glad to learn that Kovter poses no threat to their systems. When the malware downloads its executable payload, Cylance immediately convicts the infected file. Our solution also blocks the execution of malicious PowerShell scripts, meaning CylancePROTECT stops Kovter in multiple ways.